CVE-2025-0436
published 2025-01-15CVE-2025-0436: Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…
PriorityP346high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.59%
47.8th percentile
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chromium | chromium | >= 0 < 132.0.6834.83-1~deb12u1 | 132.0.6834.83-1~deb12u1 |
| chromium | chromium | >= 0 < 132.0.6834.83-1 | 132.0.6834.83-1 |
| chromium | chromium | >= 0 < 132.0.6834.83-1 | 132.0.6834.83-1 |
| debian | chromium | < chromium 132.0.6834.83-1~deb12u1 (bookworm) | chromium 132.0.6834.83-1~deb12u1 (bookworm) |
| chrome | < 132.0.6834.83 | 132.0.6834.83 | |
| chrome | >= 132.0.6834.83 < 132.0.6834.83 | 132.0.6834.83 | |
| chrome_chrome | — | — | |
| msrc | microsoft_edge | — | — |
| paloalto | prisma_browser | — | — |
| webkitgtk | webkitgtk | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
vendor_msrc8.8HIGH
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Chrome up to 131.0.6778.264 Skia heap-based overflow (ID 382786 / Nessus ID 214138)
vuldb·2026-09-30·CVSS 8.8
CVE-2025-0436 [HIGH] Google Chrome up to 131.0.6778.264 Skia heap-based overflow (ID 382786 / Nessus ID 214138)
A vulnerability marked as critical has been reported in Google Chrome. This issue affects some unknown processing of the component Skia. The manipulation leads to heap-based buffer overflow.
This vulnerability is documented as CVE-2025-0436. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
GHSA
GHSA-ww3g-8h77-wr7v: Integer overflow in Skia in Google Chrome prior to 132
ghsa_unreviewed·2025-01-15
CVE-2025-0436 [HIGH] CWE-472 GHSA-ww3g-8h77-wr7v: Integer overflow in Skia in Google Chrome prior to 132
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
OSV
CVE-2025-0436: Integer overflow in Skia in Google Chrome prior to 132
osv·2025-01-15·CVSS 8.8
CVE-2025-0436 [HIGH] CVE-2025-0436: Integer overflow in Skia in Google Chrome prior to 132
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Palo Alto
PAN-SA-2025-0004 Chromium: Monthly Vulnerability Update (February 2025)
vendor_paloalto·2025-02-12·CVSS 8.8
[HIGH] PAN-SA-2025-0004 Chromium: Monthly Vulnerability Update (February 2025)
PAN-SA-2025-0004 Chromium: Monthly Vulnerability Update (February 2025)
Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_28.html https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_22.html https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop.html CVE Summary CVE-2025-0291 Type Confusion in V8 CVE-2025-0434 Out of bounds memory access in V8 CVE-2025-0435 Inappropriate implementation in Navigation CVE-2025-0436 Integer overflow in Skia CVE-2025-0437
Red Hat
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
vendor_redhat·2025-01-15·CVSS 8.8
CVE-2025-0436 [HIGH] CWE-190 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
A flaw was found in the Skia component of Google Chrome. This issue may allow a remote attacker to exploit heap corruption via a crafted HTML page.
Package: webkitgtk (Red Hat Enterprise Linux 6) - Out of support scope
Package: webkitgtk3 (Red Hat Enterprise Linux 7) - Affected
Package: webkitgtk4 (Red Hat Enterprise Linux 7) - Affected
Package: webkit2gtk3 (Red Hat Enterprise Linux 8) - Affected
Package: webkit2gtk3 (Red Hat Enterprise Linux 9) - Affected
Chrome
Stable Channel Update for Desktop: CVE-2025-0434
vendor_chrome·2025-01-14·CVSS 8.8
CVE-2025-0434 [HIGH] Stable Channel Update for Desktop: CVE-2025-0434
Stable Channel Update for Desktop
CVE-2025-0434: Out of bounds memory access in V8. Reported by ddme on 2024-10-21 [$7000][ 379652406 ] High CVE-2025-0435: Inappropriate implementation in Navigation
Reported by Alesandro Ortiz on 2024-11-18 [$3000][ 382786791 ] High CVE-2025-0436: Integer overflow in Skia
Severity: high
Microsoft
Chromium: CVE-2025-0436 Integer overflow in Skia
vendor_msrc·2025-01-14·CVSS 8.8
CVE-2025-0436 [HIGH] Chromium: CVE-2025-0436 Integer overflow in Skia
Chromium: CVE-2025-0436 Integer overflow in Skia
Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
FAQ: Why is this Chrome CVE included in the Security Update Guide?
The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.
How can I see the version of the browser?
In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
Click on Help and Feedback
Click on About Microsoft Edge
FAQ: What
Debian
CVE-2025-0436: chromium - Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remot...
vendor_debian·2025·CVSS 8.8
CVE-2025-0436 [HIGH] CVE-2025-0436: chromium - Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remot...
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Scope: local
bookworm: resolved (fixed in 132.0.6834.83-1~deb12u1)
bullseye: open
forky: resolved (fixed in 132.0.6834.83-1)
sid: resolved (fixed in 132.0.6834.83-1)
trixie: resolved (fixed in 132.0.6834.83-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-0436 webkitgtk: chromium-browser: skia: Integer overflow in Skia [epel-all]
bugzilla·2026-09-21·CVSS 8.8
CVE-2025-0436 [HIGH] CVE-2025-0436 webkitgtk: chromium-browser: skia: Integer overflow in Skia [epel-all]
CVE-2025-0436 webkitgtk: chromium-browser: skia: Integer overflow in Skia [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Bugzilla
CVE-2025-0436 webkitgtk: chromium-browser: skia: Integer overflow in Skia [fedora-all]
bugzilla·2026-09-21·CVSS 8.8
CVE-2025-0436 [HIGH] CVE-2025-0436 webkitgtk: chromium-browser: skia: Integer overflow in Skia [fedora-all]
CVE-2025-0436 webkitgtk: chromium-browser: skia: Integer overflow in Skia [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Discussion:
FEDORA-2026-164300cb22 (webkitgtk-2.54.0-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-164300cb22
Bugzilla
CVE-2025-0436 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
bugzilla·2025-01-15·CVSS 8.8
CVE-2025-0436 [HIGH] CVE-2025-0436 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
CVE-2025-0436 chromium-browser: skia: chromium-browser: skia: Integer overflow in Skia
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
2025-01-15
Published